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Abstract 

An elementary approach is shown which derives the values of the Gauss sums over ¥ p r, p odd, 
of a cubic character. New links between Gauss sums over different field extensions are shown 
in terms of factorizations of the Gauss sums themselves, which then are revisited in terms of 
prime ideal decompositions. Interestingly, one of these results gives a representation of primes 
p of the form 6k + 1 by a binary quadratic form in integers of a subfield of the cyclotomic field 
of the p-th roots of unity. 
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1 Introduction 



Let ¥ p r be a Galois field of order p r , with Tr r (x) = X^=o xP being the trace function over ¥ p r, and 

T^r/dix) = Y^j=Q l xlpdJ the relative trace function over ¥ p r relatively to ¥ p d, with d\r fl6fl. 
Further let Xm be a character of order m defined over ¥ p r and taking values in the cyclotomic field 
Q(Cm)/ where ( m denotes a primitive rra-th complex root of unity. 
The Gauss sum of Xm over ¥ p r is defined, OUSJ, for any fj G ¥ p r as 

G r (P,Xm)= E Xm(y)C? rm =Xm(/3)G r (l,Xm) ■ 

We will focus our interest on cubic characters xs f° r odd primes p, while the case p = 2 is dealt 
with in [20J. A cubic character X3 can be either the principal character, i.e. Xz{P) = 1 f° r all f3 € ¥* r , 
or a non-principal character (if p r = 1 mod 6) 

X3(a h+3j ) = Cl h = 0,l,2,jeN, 
where a is a generator of F*, . In addition, X3(0) = by definition. 

By the above assumptions, the values of the Gauss sums of a cubic character over ¥ p r are in general 
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algebraic integers in the field Q(d,Cp) = Q(C3p)/ P / 3 and Q(Cs)/ if P = 3. Our aim is to give 
a thorough overview and derive more precise statements about these values with elementary 
techniques. In particular, we have obtained an interesting new result in the vein of Gauss' closed 
expression for Gi(l,X2) in terms of a fourth root of unity and a root of an integral quadratic 
polynomial. Specifically, our equation ((4]) expresses Gi(l,X3) in terms of a cubic root of unity 
and a root of an integral cubic polynomial (see Equation Q), whose coefficients are given explicit 
functions of p. Gauss sums over extended fields are obtained from the expression of Gauss sums 
over smaller fields, either using Davenport-Hasse's theorem or with new methods developed here 
to link values over different field extensions. 



2 Lemmas 

For the considerations below, let 

r-1 

A s (a)= ^2xm(y + a) and B r ^{a) = E Xm(l + ' 

where a may be in an extension of F pS , and \ m defined in the same extension. 

Lemma 1 Let Xm be a nontrivial character of order m over ¥ p r S , p prime, whose restriction to F p s is also 
nontrivial, and assume that there exists an irreducible polynomial X r — (3, for a suitable /3 G F p s. Then 

GrsihXm) = Xm{r)G s (l,Xm)B r , s { a )i 

where a is a root of X r — (3 (thus with relative trace Tr rs / S (a) = 0). 

PROOF. Since F p r S is an extension of order r of F p s, its elements can be written in the form 
Ya=o x * a * w ith xo,...,x r -x S F p s. We thus have 

z£W p rs Xo,...,X r — i£¥ p s i=0 

r—1 r—1 

E xm(E^)C s(rao) = E x m (E^«% Tra{rao) , 

XQ,...,X, — lGF p s 1 = XQ£ F *s * = 



xi...,x, — i€FpS 



where we used that 

r—1 r—1 r—1 



Tr rs (E^i« l ) = Tr s(Tr rs/s (E^a*)) = E ^(xiTr^/^a 1 )) = Tr s (rx ) 



i=0 i=0 i=0 



since, if a is a solution of X r — j3 = 0, then Tv rs / s (oP) = for every j = 1, . . . , r — 1 for example as 
a consequence of the Newton formulas |H vol. I, pg. 166]. The sum Y^ Xl x r _igF B Xm(Y^i=i x i ai ) 
is zero, since with the change of variable Xi = x' { X, where A is an element of F pS with x m (A) / 1, 
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the sum becomes ^ m (A) Y2xi x r -ie¥ a Xm(X^I=i x^a 1 ). 

Now, as x / 0, we may perform the change of variables x« = x^zi, i = 1, . . . , r — 1 and write 

r-l 

G„(l, X m) = E C P Trs(rxo) E X m (x + xoE^« l ) 

xoe-Pp S Zi...,Z r _i6F p a i=l 

r-l 

= E Cj rs(rxo) Xm(a;o) E Xm(l + E^)" 
xoe-Fp S zi...,z r _ieF pS i=i 

The conclusion is immediate, noting that the first summation is simply Xm(r)G s (l, Xm)- D 

The following Lemma is a corollary of the previous one, specialized to the case r = 2. However, we 
present another proof, whose structure and running results are instrumental to proofs of further 
theorems. 

Lemma 2 Let x-m be a nontrivial character of order m over ¥ p 2 S , p odd, whose restriction to ¥ p s is also 
nontrivial; then 

G 2s (l,Xm) = Xm{oi)G s {l,Xm)A s ( — ) , 

where a is a root of an irreducible polynomial X 2 — (3 for a suitable f3 € ¥ p s. 

We note that from the definition of a and (3 it follows that Tr 2s / S (a) = and that X2(/3) = —1 for 
the nontrivial quadratic character over ¥ p s . 

PROOF. Since ¥ p 2s is a quadratic extension of ¥ p s, its elements can be written in the form x + ay 
with x, y, £ ¥ p s. We thus have 

G 2s (l, Xm )= E ^WC 2s(2) = E X m (x + ay)C p Tr2s( * +Qy) = E Xm{x + ay)^ 2x) , 

z& p 2s x,ye¥ p s x,y£¥ p s 

where we have used the equality Tr 2s (x + ay) = 2Tr s (x) = Tr s (2x). Multiplying the last sum by 
Xm(2)Xm(2) = 1, we can write 

G 2s (l,Xm) = Xm(2) E Xm{x' + 2ay)( p v ^ x '\ 

x',ye¥ p s 

and split the summation into three sums 

Xm(2) E ^ 2a y) ' E Xm(x')Cj Mx,) , Xm(2) E Xm(x' + 2ay)( p T ^ . 

The first summation is 0, the second summation is Xm{2)G s (l,Xm)', the third summation can be 
written as follows: the substitution y = zx' yields 

Xm {2) E X m (x' + 2azx')C p TMx ' ) =X m (2) E X m {x')Q s{x ' ] E Xm(l + 2az) = 

x',ze¥* s x>&* p3 ze¥ ps 

Xm(2)G s (l, X m)Xm(2a) E Xm(z + ^) = Xm(2)G,(l,Xm)Xm(2a)[A a (^)- X m(^ c )] ■ 

ze¥* pS 

In conclusion, by combining the above summations, we have G2s(l, Xm) = Xm{oi)G s {l, Xm)4(^)' 
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□ 

Corollary 1 Suppose p is odd and t = 2 k s, with k > 1, and let Xm be a nontrivial character over ¥ p t, 
whose restriction to ¥ p s is also nontrivial. Then 

k l 
G t (l,Xm) = G s {l,Xm)Y[xm(ai)A 21 ^i s ( — ), 

i=l 

where a, is a root of an irreducible polynomial X 2 — fii over ¥ p2 i-\ s , i = 1, . . . , k. 

Lemma 3 Let Xm be a character over ¥ p s, p = —1 mod m and m odd. Then G s (l, Xm) is real. 

PROOF. We can write 

^(1, Xm) = Gq + CmG\ + C m G2 H + (m^Gm-i , 

where Cm is a primitive m-th root of unity and 

G 3= E $ TS{X) > 0<j<m-l , 

Xm ( x ) = Crn 

known as Gauss periods [Tlj, are real numbers, since Xm{%) = Xm{—x), as —1 = (— l) m is an 
m-th power. Thus, in each sum the exponentials occur in complex conjugated pairs. Furthermore, 
Gj = G m -j as proved by the following chain of equalities: 

Gj = £ C? sW = E ^ S(XP) = E $ MXP) = E & 3{V) = Gm-j • 

Xm(x)=Cm Xm{x)=C m Xra(^ P )=CS Xm(j)=C" J 

In fact raising the trace argument to the power p leaves the trace invariant; Cm = Cm as p is 
congruent to —1 modulo m; lastly, the automorphism a(x) = x p simply permutes the elements of 
the field. Then, for any j, CmGj and (m~ J G m -j sum to give a real number, hence G s (l, Xm) is also 
real. 

□ 

Corollary 2 Let X3 be a cubic character, p = 2 modulo 3 (p = 2 or p = 6k + 5). Then G s (l, X3) is real. 
Remark 1. For the case p = 2, see an alternative proof in [20J . 

Lemma 4 Let Xm be a nontrivial character over F„2 S , with p and m odd. If (p s — 1, m) = 1 (in particular 
the restriction of Xm to ¥ p s is trivial), then G2 S (1, Xm) = P s - 

PROOF. As in Lemma 121 let a be defined as a root of an irreducible polynomial X 2 — f3, with a 
suitable f3 6 ¥ p s . Then 

G 2s (l, X m)= E Xm(^ + ay)C^ {2x) • 
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We split the summation into three: Si = Xm(2) X^eF pS Xm(2ay), 

S 2 = x m (2) E Xm{x')^ x '\ and S 3 = Xm (2) £ X m(x' + 2ay)(^ . 

The first summation is Si = Xm{o){p s — 1), since the character is trivial over ¥ p s, the second 
summation is S2 = — Xm(2), and the third summation, after the substitution y = zx', gives 

S 3 = x m (2) Yl Xm&Kp'W E Xm{± + 2az) = -Xm{2)[Xm{2a) ^(^ + z)-l\ ■ 

x'£F* s z£F* s ze¥ p s a 

In order to evaluate ^4 S (^) = Ylz& s Xm ( ^ + z )> we consider the sum of A s {f5), for every ft G ¥ p 2 S , 
and observe that A s {ft) = p s — 1 if ft G F p s, since all elements in this field are m-th powers, while, 
if /3 G" F p s all sums assume the same value A s (a), which is shown as follows: set ft = u + av with 
v ^ 0, then 

Y, Xm{z + u + av)= ^2 Xm(v)Xm((z + u^" 1 + a) = ^ Xm{z' + a) = A s (a) . 
Therefore, the sum ^ = Y Y Xm ^ z + ^ = Y Y Xm(^ + /?) = yields 

P& p 2s /3eF p2s z& p s zd¥ p s /3eF p2s 

p s {p s -l) + (p 2s -p s )A{a) = 
which implies A(a) = — 1 = A(^). Finally, by combining the above, 

G 2s (l,Xm) = Xm{a){p s - 1) +Xm{a) = Xm(a)p s =p s , 
because a, a root of X 2 — ft, is an m-th power, since every ft G ¥ p s is an m-th power. 

□ 

Remark 2. The above lemma can also be proved using a theorem by Stickelberger, [16, Theorem 
5.161 or I2ZI. 

3 Results 

Trivial character. Let X3 be trivial, then 

Gr(i,X8) = Y X3(y)(^(y) = £ cj^) - 1 = P - 1 E(;-i = -i, 

J/GF p r j/eF p r aeFp 

since the number of elements with the same trace a G F p (0 included) is equal to p r_1 , i.e. the 
number of roots in ¥ p r of the equation Tr r (rc) = a. This result settles in particular all the cases 
of the fields F3r, or ¥ p r with p = 5 mod 6 and odd r, where there is only the principal character, 
because every field element is a cube. 
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Nontrivial character: case p=6k+5. If p = 6k + 5 and r is even, a nontrivial cubic character exists 
and it will be shown that G r (l, X3 ) = — (— p) r ^ 2 , without recurring to Davenport-Hasse's theorem. 



Theorem 1 Ifp = 6k + 5 and s is odd, then G2 S (1, X3) = p s - 
PROOF. Since p s = — 1 mod 3, the conclusion is a consequence of Lemma|H 

□ 

Theorem 2 Ifp = 6k + 5 and s is even, then (^(l, X3) = ( — p) s ^ 2 G s (l, X3)- 

PROOF. Let a G F p 2 S be a cube and root of an irreducible polynomial X 2 — (3 over ¥ p s (clearly such 
an a exists, since if 7 is a root of X 2 — /3, with X2W) = — L then 7 s , a cube, is a root of X 2 — /3 3 and 
X2(/3 3 ) = X2(/3) 3 = -1). Then by Lemma H 

G 2s (l, X3 ) = G s (l,X3)A s (^) , 

where ^(2^) = X^gf * ^3(2^ + z ) ^ s an algebraic integer in the cyclotomic field Q((s) which can 
be written as Aq + C3A1 + Cf ^2, where Aq, A\, and A2 are the numbers of z for which X3(^ + z ) 
is equal to 1, £3 or £f, respectively, and Aq + A\ + A2 = p s . 

Now, by Lemma 13 both C?2 S (l,x 3 ) and G S (1,X3) are real, which implies that A s {^-) is also 
real, so that A\ = A%. We also know that Aq + A\ + A2 = Aq + 2A\ = p s , so we consider two 
equations for Aq and A\ : 

" A + 2A a = p s 

Aq - A! = ±p s ' 2 

obtained from the fact that we know the absolute values of G s (l, x 3 ) and Cr2 S (l, x 3 )/ 113 Theorem 
1.1.4, pg. 10], E3. 

Solving for Ai we have Ai = ^(p s =F p S//2 )- As Ai must be an integer, we have 



.,1s . . f p s l 2 ifs/2iseven 
A s {—) = Aq-A 1 = \ y /2 7 

2a [ — ifs/2isodd. 



□ 



Corollary 3 Ifp = 6k + 5 and s is euen, f/ren (?2 S (1, X3 ) = — P s - 



Nontrivial character: case p=6k+l. Ifp = 6fe+l,2? r — lis divisible by 3, so there exists a nontrivial 
cubic character in F p r for every r > 1: we know that the Gauss sum over F p of a nontrivial cubic 
character is an algebraic integer in Q(C3p) of absolute value -Jp. Specifically we have 

Theorem 3 Ifp = 6k + l, then G\(l, X3) is an element 0/(5(^3,77), a subfield o/Q(C3 P ) with degree 6 over 
Q, where 77 is a root of a cubic polynomial with rational integer coefficients and cyclic Galois group over Q. 
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PROOF. As in the proof of Lemma |3l for a cubic character we can write 



G 1 (l,X3) = Go + C3G 1 + C 3 2 G2 , 
where £3 is a primitive cube root of unity and, for < j < 2, 

G j = e C > 

Xs(x)=^ 

which are real numbers since Xs( x ) = Xz{— x )> as —1 is a cubic power. Then, to evaluate the Gauss 
sum Gi(l, X3) is tantamount to computing the Gauss periods Go, G\, and G2. The following 
derivation can be found partly, in different form, in Gauss |fTTl art. 350-352]. 

Let a be any positive integer less than p and a a G <3(Q(Cp)/Q) be the element of the Galois 
group of Q(Cp) whose action on Q p is defined as <J a ((p) = Cp> p3| , then 

This implies that any of these automorphisms induces a permutation of Go, G\, and G2, and 
therefore leaves their symmetric functions invariant, which thus belong to Q. In particular, the 
three elementary symmetric functions 

s\ = Go + Gi + G2 , S2 = GqG\ + G1G2 + G2G1 , S3 = G0G1G2 , 

are rational integers; it follows that Go, G\, and G2 are the roots of a cubic polynomial with rational 
coefficients q(z) = z 3 — s\z 2 + s<iz — S3, which has a cyclic Galois group of order 3 (since ^i- values 
of a give the same permutation of its roots). Thus q(z) is irreducible over Q, and denoting one root 
with rj, the other roots can be expressed as polynomials with integer coefficients r\ (77) and r2 (77) of 
degree 2 in rj. 

□ 

Gauss computed the coefficients of the cubic polynomial q(z) by a clever manipulation of the 
periods, a task that generally has non-polynomial-time complexity in p. The following theorem 
proves that these coefficients can be computed, with deterministic polynomial-time complexity, 
exploiting pure arithmetic features of p without dealing with Gauss periods. 

Theorem 4 Let q(z) be the monic polynomial whose roots are Go, G\ and G2. Then 

/ \ 3,2 P~ 1 (3 + U)p-1 

q{z) = z +z — z — , (1) 

where u is obtained from the representation Ap = u 2 + 27v 2 and taken with the sign making the constant 
term an integer. 

PROOF. Let g(z) be as above z 3 — siz 2 +S2^— S3. It is immediately seen that s± = — h^Y^x==oQ = 0- 
Using the structure constants of the integral algebra generated by Go, G\, and G2, we will show 
that S2 = — ^Tp, while S3 ultimately depends on the representation (u, v) of 4p by the quadratic 
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form u 2 + 27v 2 . 

Let a be a generator of the cyclic Galois group of Q(r/) (a is also a generator of the Galois group 
of q(z)), then Go = rj, G\ = a(rj), and G2 = cr 2 (r/) are Q-linearly independent [2] and generate 
an algebra, IIT91 Lemma 2.2], whose constants of multiplication [9] are rational integers, Ifl9l Re- 
mark 2.3], so that G0G1, G1G2, and G2G0 are linear combinations of Go, G\, and G2 with integer 
coefficients. Furthermore, since Go, G\, and G2 are cyclically permuted by the action of a, we can 
write 

G Gi = aGo + 6G1 + cG 2 

GiG 2 = aGi + 6G 2 + cG (2) 
G 2 G = aG 2 + 6G + cGi 

where a, b, c are integers whose sum is 2^-, since each Gj contains powers of ( p and each 

GiGj, i / j, expands into terms which are powers of ( p whose exponents, reduced modulo 

p, are never 0. Then, summing the three equations, we get 

S2 = (a + 6 + c )(Go + G 1 + G 2 ) = -^ . 

The evaluation of S3 requires the explicit knowledge of c: by summing the three equations, multi- 
plied by G2, Go, and G\ respectively, we obtain the relation 

3G GiG 2 = (a + b)s 2 + c{G 2 + G\ + G\) = - c)s 2 + c(l - 2s 2 ) , 

which yields S3 = ^ [cp — ] ■ Now, the value of c is specified as follows. 

Since the Galois group of q(z), which is a polynomial with integer coefficients, is cyclic of order 3, 
its discriminant A is the square of an integer [6, Proposition 7.4.2]. The direct computation yields 

p 2 (p 2 - 2p + 1 - 18cp - 18c + 81c 2 ) 
~ 27 ' 

then A must be of the form v 2 p 2 , whence c is obtained from the equation 

= p 2 - 2p + 1 - 18cp - 18c + 81c 2 + 27n 2 = -Ap +(9c-p- l) 2 + 27v 2 . (3) 

It is known [TTj. [I2l [El that primes of the form 6k + 1 are essentially (up to signs) represented 
in a unique way by the quadratic form x 2 + 3y 2 (note that this representation may be computed in 
deterministic polynomial time using the Schoof algorithm [21 j and the Gauss reduction algorithm 
of quadratic forms IfTTII V Further, 4 = 1 + 3 is represented by the same form, then Ap has essentially 
three different representations, namely 

Ap = (2x) 2 + 3(2y) 2 , Ap = (x - 3y) 2 + 3(x + y) 2 , Ap = (x + 3y) 2 + 3(x - yf . 

Since x is relatively prime with 3, necessarily exactly one of 2y, or x + y or x — y is divisible by 
3 and allows us to write Ap = u 2 + 27 v 2 . By comparison with 10 we have 9c — p — 1 = u, and u 
should be taken with the sign that makes the expression p + 1 + u divisible by 9, in order to have 
an integer c, that is u should be taken with the sign that makes it congruent to 1 modulo 3: since 
p + 1 + u = mod 9 implies that the same expression is modulo 3 and p is congruent to 1 modulo 
3, then also u must be congruent 1 modulo 3. □ 
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Corollary 4 The multiplicative constants of the algebra generated by the periods (equation @J are obtained 
from the representation Ap = u 2 + 27v 2 as 

2p — u + 9v — 4 2p — u — 9v — 4 p + 1 + u 

a = , b = , c = , 

18 18 9 

where the sign of u is specified in Theorem^ and the sign of v is such that a and b are compliant with the 
chosen definitions of G\ and G 2 . 

PROOF. The value c = p+1 9 +u has been found in the proof of Theorem 31 where it was also re- 
marked that a + b + c = 2z_ ; thus for computing a and b, we only need a further independent 
relation. 

Adding member by member the three equations in ((J)) after their orderly multiplication by Go, G\, 
G2, or by G\, G2, Go, respectively we obtain 

rx = G 2 Gx + G 2 G 2 + G 2 G = a(G 2 + G 2 + G 2 ) + {b + c)(G Gi + G X G 2 + G 2 G ) , 

r 2 = G\Go + G 2 G 2 + G\G X = b(G 2 + Gj + G 2 2 ) + (a + c){G G 1 + G X G 2 + G 2 G ) . 

If we know either r\, or r 2 , then we have a second linear equation for a and b. To compute t\ and 
r 2 , we observe that they are exchanged by permuting, for example, Go and G\, and are invariant 
under a cyclic permutation of Go, G\, and G 2 . Then, their sum n + r 2 and product r\r 2 are 
symmetric functions of the roots of q(z) and a theorem of Lagrange's [4] assures that they can be 
expressed by means of the elementary symmetric functions s\, s 2 , and S3 (the coefficients of q(z)). 
Thus, using properties of the symmetric functions [4|, we have 

ri + r 2 = sis 2 - 3s 3 , nr 2 = si- Qsis 2 s 3 - 9s 2 , - s 3 sf , 

and substituting the explicit values of s\, s 2 , and S3 given in TheoremHl we obtain 

3p — 1 — p(u + 3) 1 + pu + p 2 u 2 — 3p 3 

fi + r 2 = and ri r 2 = . 

9 81 

Solving a second degree equation, we find r\ = l( 3p ~ 1 ~?'( n+3 ) -|_ p V ~j and r 2 = ^( 3p ~ 1 ~g < - n+3 ' ) — pv), 
where the sign of v should be properly chosen to match the values of n and r 2 obtained from the 
definition of the Gauss periods. In conclusion, from the system 



a + b 



2p-4 



a^-b^ 
we obtain a = 2 P-"+ 9t " 4 and b = 2 v~^-\ 
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□ 



It is possible to obtain a representation of the Gauss sum Gi(l, X3) in terms of a single root n p of 
q(z) by expressing Go, G\, and G 2 in terms of r/ p , because Q(w p ) is the splitting field of q(z), as seen 
in Theorem 3 (cf. also (21). For example, we may set Go = thus the other roots, that is, Gauss 
periods, are 

G 2 Q A-u-3v 2-u-9v-4p 

Gi — 1 G H — , 

v bv lov 



Gl 3v-u + 4 9w-u-4p + 2 

Gr2 — Go — — 

v 6v I8v 



We note that changing the sign of v is equivalent to exchanging the values of G\ and G 2 . These 
equations establish a correspondence between Go, and G\ and G2, thus the coefficients a, b, and 
c in equation (0 can be uniquely specified, for instance the equation GoG\ = aGo + bG\ + CG2 is 
satisfied choosing 

2p - u - 9v - 4 , , 2p - u + 9v - 4 

a = and = , 

18 18 

whatever be the sign of v; c is specified in any case as shown in Theorem [4] 

These observations yield the following representation: 

Theorem 5 The Gauss sum Gi(l,X3) is uniquely characterized in terms of a root rj p of q(z), with u,v 
obtained from the representation u 2 + 27v 2 ofAp, as 

A ,Vp 4-u-3v 2-u-9v-Ap x ~. rjp 3v - u + 4 9v-u-4p + 2. IAS 

V P + (3{— + 7. V P + 7^ + C 3 ( a Vp 77, • (4) 

v ov lav v ov lav 



Remark 3. Since ( 2 = — 1 — (3, we can write 

Gi(l,X3) = G -G 2 + C 3 (G 1 -G 2 ) , 
thus the relation G\(l, xs)Gi(l, xs) = P yields 

P = (Go - G 2 ) 2 - (Go - G 2 )(Gi - G 2 ) + (Gi - G 2 ) 2 

which shows that the equation x 2 — xy + y 2 = p has further solutions in the maximal order of Q(C P ) 
besides the solutions in rational integers, for example x = ri(r]) — -q and y = ^(t?) — r\. 



Example Consider p = 7, then the Gauss sum has the form 

Gi(l, x) = (Ct + Cl) + C 3 (C? + C 7 5 ) + c!(c? + C 7 4 ) , 

the coefficients Gj of the powers of C3 are real, and are roots of the cubic polynomial z 3 + z 2 — 2z — 1, 
which has a cyclic Galois group of order 3 over Q. Let 7/7 be a root of this polynomial. The other 
roots are —2 + rj 2 and 1 — 7/7 — t] 2 , thus if we choose the roots r/7 = (7 + Ctv an d the other two roots 
equal to C7+C7 £7 +C7/ respectively, we obtain the expression 777 + £3 (— 2 + 777) + C3 (1 — V7~ V7)' 
which coincides with the expression obtained specializing @ with p = 7, u = 1, and v = 1. 
Furthermore, it is direct to check that x = — 2 + r] 2 — 777 and y = 1 — 7/7 — i] 2 — 777 give a representation 
of 7 through the quadratic form x 2 — xy + y 2 in integers of Q^), which may be of interest besides 
the 12 representations in rational integers (see e.g. IIT31 Proposition 8.3.1], |18 |), namely x = 2 and 
y = — 1 and those obtained through associates and conjugates of 2 — (3 in Q (£3). 

A Gauss sum over F p r is in general also not rational, as can be found using Davenport-Hasse's 
theorem, J3l [M), by lifting the case over ¥ p . If there exists an irreducible polynomial X r — /3 over 
F p we can use Lemma [TJ to obtain the following theorem: 
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Theorem 6 If p = 6k + 1, and if there exists an irreducible polynomial X r — (3 over ¥ p , then G r (l, X3) 
is again an element of the subfield Q(( 3 , v) of degree 6 ofQ(( 3p ), and in particular it can be written in the 
form 

G r (l,X3)=X3(r)Gi(l,x 3 )S r ,i(a) , 

where a is a root of X r — (3. The factor B r _\{a) has the form Bq + -B1C3 + -B2C3 where Bq, B\, and B2 
are positive rational integers, that can be computed, up to a permutation, from the solutions of a quadratic 
Diophantine equation. 

PROOF. By Lemma [1} we have 

G r (l,X3)=X3(r)Gi(l,X3)S ril (a) j 



where B r \{a) is an element of Q(C 3 ) with absolute value \Jp r 1 (by taking absolute values of both 
sides). This expression shows that G r (l, Xs) belongs to Q(t/, (3) as X3)/ since B ri i(a) belongs 
to Q(C3). The factor B r>1 {a) £ Qfa) can be written as 

B r , 1 ( a )=B + B 1 ( 3 + B 2 (l 

where Bq, B\, and B2 are positive integers whose sum is p r ~ l . Since the square of the norm of 
B Tj i(a) is p r ~ l , we have the Diophantine equation 

p r ~ 1 = Bq + B\ + B\ — BqB\ — B\B 2 — B 2 B . 

Using the relation Bq + B\ + B2 = p r ~ l , we eliminate B2 and obtain a quadratic Diophantine 
equation that can be solved for Bq and B\ : 

Wl + 3Bf + 3B B 1 - 3p r_1 5 - 3p r ~ 1 B 1 + 3(p 2r-1 - p r ~ l ) = . 

With the substitution 



we obtain the equation 



-DO = ^ ) t>l = ^ 



X 2 +XY + Y 2 -3p r ~ l =0 , 



whose solutions can be obtained from the solution of 

u 2 + uv + v 2 = p 

as coming from 

X - ( 3 Y = (1 - ( 3 )(u - vCs) 1 - 1 

by composition of quadratic forms. The ultimate assignment of the solutions to the B{ depends 
on the choice of the primitive roots in the definition of the Gauss sums. 

□ 

In the following we focus on the special case r = 2 to enlighten some properties and relations 
of the Gauss sums seen from different perspectives. 
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Theorem 7 Ifp = Qk + 1, then G^l, X3) zs again an element of the subfield Q(C3, v) of degree 6 o/Q(C3 P ), 
and zn particular it can be written in the form 

G 2 (1,X3) = G 1 (1, X 3)A 1 (^) , 

w/?ere a is a roof of x 2 — j3 and (5 e F p z's cube and quadratic non-residue. 

PROOF. As in Theorem^ we can find such an a and then use Lemma|2]to deduce 

G 2 (1, X3 ) = Gi(l,X3) E Xs(^ +z) = G 1 (1,X3)A 1 (^) , 

where ^i(^) is an element of Q(Cs) with absolute value y/p and X3( Q ) = 1- 

In conclusion G 2 (l, X3) = XsMi(^) shows that G 2 (l, X3) belongs to Q(ry, £3). 

□ 

Remark 4. Theorem[7|states that the Gauss sum ^2(1, X3) is the product of G±(l, X3) and Ai(^), 
a result that is slightly different from that obtained using Davenport-Hasse's theorem fl3}, which 
states that G 2 (l) X3) = — G\(l, X3) 2 , where X3 is defined by extending the nontrivial character over 
¥ p to a character over ¥ p m, using the extension rule 

where Ng pm (x) = x ■ x p ■ ■ ■ x pm 1 is the norm of x. In our case we have x^) = X3(^F 2 ar *d 
whenever X3 is restricted to ¥ p , we specifically have 

Xs( x ) = X3{N ¥p2 (x)) = XsO^ 2 ) = Xs(x) Vx E ¥ p . 

Therefore, since G2(l, X3) = X;j( — 1)^2(1, X3) = ^2(1, X3)/ the equation given by Davenport-Hasse 
can be read as 

G 2 (l,x 3 ) = -Gi(l,X3) 2 , 

where x'3 is a cubic character defined in ¥ p 2, and G\ (1, X3) is evaluated on the subset F p . 
In the following proposition we show how this relation may also be derived elementarily. First 
we need a well-known lemma (see also (131 Proposition 8.3.3] or [1J), for which we present an 
alternative proof: 

Lemma 5 Ifp = 6/c + 1, then G%{1, x 3 ) 3 = pEx G f p X3{x{x - 1)). 
PROOF. The proof is straightforward from the computation of the cube 

Gi(l,x 3 ) 3 = £ X3(xyz)c; +y+z = Yl X3(xy{u-x-y))C; , 

in which the substitution u = x + y + z has been performed. The summation over x can be split 
into two summations Si and S2, depending on whether u = yoru^y. The first summation turns 
out to be 0, since 

S ^ = E E (*))# = E »W E ra(x 2 ) = E » w E x§0»0 = . 

yGFp xGF p j/GFp xGF p j/6Fj, a;GF p 
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The second summation, with the substitution x = x'(u — y), becomes 

s 2= E c;E»W«- I -!/))= E *3(y)Cp E ^-^(^(i-*')) . 

y,ue¥p x£F p y.ueFp x'e¥ p 

Defining A = Ylx'ew p Xz{ x '{\ — x '))> a constant that does not depend on u or y, we may write 

s 2 = aJ2 CE xMxzW -y) = A[J2 x 3 (y)x 3 (o - y) + E C E xMxz{u - y)\ ■ 

u&p y^u ye¥ p u^O y& p 

In conclusion, we have S% = Ap, since the first summation over y is p — 1, the second summation 
over y is — 1 independently of u, (20l [24]|; finally, the summation over u is —1, so that p — 1 + 

(-1)(-1)= p. 

□ 

Since X3)Gi(l, X3) = £>/ the above result gives 

G 1 (l,X3) 3 = G 1 (l,x 3 )Gi(l,X3)>l 
which implies that Gi(l, X3) 2 = Gi(l, X3M- On the other hand, Theorem [7] gives 

G 2 (l,X3) = Gi(l,X3)Ai(_L) , 

thus we can prove the identity G2 (1, X3) = — Gi(l> X3) 2 / implied by Davenport-Hasse's theorem, if 
we can prove that A = — Ai{-^). It is in fact immediately seen that both A and Ai(^) are primes 
of the form a + 6(3 and field norm p in ^(£3) . Less direct is the exact relation between them, which 
we establish in the following proposition making use of the function defined as 



where g is a primitive element in ¥ p . 
Proposition 1 



X3(l/) = 1 



PROOF. We can write A in the following form 

A=Y / X3(x(x-l))=^X3(z 2 -\) , (5) 



A' 

Z&p 



where the last expression was obtained by making the substitution x = z+^. Furthermore, A\ (^-) 
can be written in a similar form, arguing as follows: 



[ i(i) = E*3(* + ^)=Ex3(* + ^: 

xe¥p x&p 
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Furthermore, the identity X3(y) = X3(y) p = Xz{y p )> which is true since p is congruent to 1 modulo 
3 and \3 is a multiplicative character, implies 

X3(x + = X3(x + 77-) P = X3(x p + ttt-tt) = X3<> 



2a' AdV 2a' AiK (2a)P J AdV (2a)' ' 

as x and 2 belong to F p , q is a root of x 2 — (3 and the Frobenius automorphism exchanges the roots. 
Then 

We notice now that, by definition, the value of any summation J2 z e¥ p Xsi 2 " 2 ~ d) can be written in 
the form ao + «iC3 + a 2Cf/ where ao, a% and 02 are the numbers of z € F p such that the value of 
X3(z 2 — d) is either 1, or £3, or £|. Therefore, writing z 2 — d = g l y, with X3(y) = 1/ w e have 



a,: 



V | J+ (jbi£)]_£zl + 1 P (i , i) « = ,1,2, 



xs(l/)=l 

since [1 + f - - - ^ ] is equal to 0, if <f y + d is not a square; it is equal to 1 if g % y + d = 0; and it 
is equal to 2 if g*y + d is a square. 

Then, setting A = 60 + &1C3 + &2C3 an d ^i(^) = c o + C1C3 + C2C3/ an d usrn g the expressions for A 
and ^1(2^) given in (|5]) and ©, we obtain 

E n + (-^i-)i«dc- E ii+f-^A-)] -0,1,2. 

X3(j/) = 1 X3fe) = l 

The numbers c, can be written as follows 



E n + E n-f-iK-^)- E n- 

X3(2/)=i X3(y)=i X3(j/)=i 

because /3 is a quadratic non-residue; furthermore, since /3 is a cube, setting w = y(3, we deduce 
that 



Ci 



...eTK"* V 7 



X3 (uj) = 1 



which only differs in sign from hi = p -^- + F(j, i). The proposition follows from the fact that 

A = b + b x C 3 + 62C3 2 = {bo ~ h) + (h - b 2 )( 3 

and 

la 



□ 
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Remark 5. As has been said, Gauss sums are algebraic integers that belong to a subfield of a 
cyclotomic field, and in the above theorems we found some factorizations of Gauss sums into 
elements that may belong to different subfields. For example Theorem 4 shows that G^l, Xz) £ 
Q(C3,f?) can be expressed as a product of Gi(l,X3) £ QiCs^v) and ^i(^) e Q(Cs)- The general 
picture of the fields involved in these factorizations is shown in the following figure 




Every extension is Galois, in particular Q(r/), Q(Cs) and Q(C3; r ?) have Galois groups C5(Q(??)/Q), 
&(Q(Cs)/Q), and <8(Q(C3, v)/Q)' which are cyclic groups of order 3, 2, and 6, respectively; more- 
over, the third group 0(Q(C3, f?)/Q) = <3(Q(C3)/Q) x ®{®(v)/Q) is a direct product of the other 
two (see also [23 1). In these fields, every rational prime p of the form 6k + 1 splits into prime ideals 
as follows: 

(p) = p 3 in Q(rj), i.e. the ideal (p) fully ramifies; 

(p) = ( 7r i)( 7r 2) in Q(Cs)/ i- e - t ne ideal (p) fully splits into principal ideals; 

(p) = ^1^2 ^ Q(C3> V)> i- e - the ideal (p) fully splits into ramified ideals; 

(tti) = <pf and (tt 2 ) = ^P|' i- e - the principal ideals of ®((s) fully ramify in ®((s, rj); 

p = q}i $ p 2 inQ(C 3 ,r ? ). 

These factorizations can be established by the properties given in pg. 137-138], that is Dedekind's 
formulation in terms of ideals of a theorem of Kummer's, or in 11231 pg. 15]. 

Let T2 denote the automorphism of order 2 in *5(Q(C3)/Q)/ which leaves the elements of Q(r/) 
invariant when considered as elements of (5(Q(C3, ??)/Q), then T2(^Pi) = ^2- 
Now, the Gauss sum Gi(l, X3) is an element of Q(C3, v) that divides p, as Gi(l, X3)G\(l, xs) = P, 
m, so that (G 1 (l, X 3))(r 2 (Gi(l,X3))) = (Gi(l, Xs))(Gi(l, Xs)) = (p) -Therefore the principal ideal 
(Gi(l, X3)) will be a product of powers of the two primes *Pi and ^2, i-e (Gi(l, X3)) = ^Pi^Pl' 
where a + b = 3 by the unique factorization in prime ideals, since the previous relation gives 

(p) = wty^m^) = wtwiwi = Ti +b T 2 +b - 

Thus, we may assume that (Gi(l, X3)) = ^Pi^Pl' as Gi(l, X3) belongs properly to Q(C3, V)> whence 
Theorem[7|and Proposition!]] show that (G 2 (l, Xs)) = = 0i)3W|- 

In this framework, if the character x'3 is used, the role of the two prime ideals is simply exchanged, 
i.e. ((^(l, X3)) = V2V1 = ( 7r 2)*P2^Pi/ which is the expression defined by Davenport-Hasse's 
theorem written in terms of ideals. 
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In general, the Gauss sums G S (1,X3) for any s can be expressed in terms of ideals as follows: 

(G a (l,x 3 ))= Wl s - 

However, these formulations in terms of ideals (see also |8][l5j[22]|) conceal the information about 
which units are involved. In this sense, the elementary direct approach can be more informative, 
although it may require different approaches for different situations. Considering for example 
the Gauss sum mentioned above, Gi(l, x) for p = 7 (see also llTOlO , setting 777 = (7 + £7, we can 
explicitly write the expression (which can also be obtained specializing 0$ wimp = 7, u = 1, v = 1) 

x) = m + Cs(-2 + r$) + Cl(i - m - rf) , 

whereas, choosing the ideals = (£3 — 777), ^2 = (Cf ~~ r n)> we must find a unit in order to obtain 
a complete factorization: Gi(l, x) = (4 — V7 ~ 2^7) (C3 — ?77)(Cf — V7) 2 ' where 4 — 777 — 2r/y is a unit. 
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